Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132372e302f32342d3234203d3e203538333639.roa
File:                     34352e3131322e3132372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          bSAFo3vsuwefB1GJdf3Radn2qThEuSiLEkE9Kh7YSbg=
Subject key identifier:   EA:DD:8A:9D:AD:D8:45:71:29:B6:FA:3B:4A:C1:8C:9E:02:71:C8:9C
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       184EDF11B40DF83767B3216A4C8EED05669DD943
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132372e302f32342d3234203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:30 +0000
ROA not before:           Sun 03 May 2026 02:10:30 +0000
ROA not after:            Sun 02 May 2027 02:15:30 +0000
asID:                     58369
IP address blocks:        45.112.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4e:df:11:b4:0d:f8:37:67:b3:21:6a:4c:8e:ed:05:66:9d:d9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:30 2026 GMT
            Not After : May  2 02:15:30 2027 GMT
        Subject: CN=EADD8A9DADD8457129B6FA3B4AC18C9E0271C89C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:98:cb:22:6d:91:00:0a:20:73:da:fb:d1:
                    86:f4:c2:5a:13:e2:b1:8c:da:e4:d5:8b:b3:c0:a6:
                    4a:f0:e0:6f:22:41:5e:5f:92:15:85:82:97:29:c9:
                    99:6f:86:fb:a0:bc:28:de:ef:51:d8:74:a0:f0:09:
                    c0:07:8d:73:9f:40:8d:cb:60:fa:fb:4e:9e:95:96:
                    2a:6e:2d:8b:85:38:fc:8a:06:4d:b4:1c:e5:8e:c7:
                    f6:97:51:3f:64:0f:cc:4d:51:b5:68:91:05:93:9c:
                    e5:8a:a5:d6:e5:69:8a:7b:8a:3b:f4:d3:ca:26:9f:
                    a1:d3:85:59:5c:08:dc:c0:70:81:92:e5:dc:20:1e:
                    69:79:82:ba:86:60:d7:b9:d6:6b:a7:24:10:02:22:
                    72:64:b1:a6:e7:7f:41:cc:6e:ed:a1:12:8a:eb:e7:
                    80:97:e0:29:bd:98:39:f9:2c:be:6f:b2:89:0a:d2:
                    a4:21:a9:5c:94:5b:32:d5:78:9b:78:cc:c1:29:35:
                    82:ed:d4:af:b7:21:a0:99:9c:68:e6:41:72:6e:1d:
                    04:cb:fa:0d:c9:36:eb:d9:44:e0:29:81:99:8c:c9:
                    f9:29:2a:20:42:09:78:22:35:8a:a8:3d:ae:2a:b9:
                    4a:38:1d:b4:3f:f7:30:86:96:25:0e:6a:1e:5d:ca:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DD:8A:9D:AD:D8:45:71:29:B6:FA:3B:4A:C1:8C:9E:02:71:C8:9C
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132372e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:11:c4:35:82:2c:f8:3f:3f:5c:a5:1a:32:92:1d:39:bf:00:
         3e:71:97:66:63:7b:4c:71:f9:e0:8d:f4:86:5b:70:43:d5:d9:
         fc:c6:b6:95:30:6e:a0:dc:ae:25:29:e4:0e:f8:b2:01:0e:4d:
         37:3d:6e:2b:cd:e5:6d:45:1c:39:0f:47:08:0e:f8:2d:5d:1b:
         13:87:70:4e:fa:09:84:9a:c4:a8:17:c6:34:e1:f2:80:a1:7e:
         95:f6:e5:a7:06:6e:87:b2:05:d7:da:8a:e4:1d:50:6a:3e:07:
         bd:94:43:ea:6a:56:67:fe:f7:c2:2f:24:68:cd:c2:00:04:b6:
         bb:f6:7a:d2:db:5f:85:e7:dd:e6:fc:6b:00:f1:b0:59:bd:48:
         05:79:0c:57:b2:7b:b9:b0:c4:8a:cf:4b:0c:48:30:72:b4:7e:
         5e:27:92:53:3d:2c:55:66:10:b4:6d:fd:11:0b:42:ef:b3:7c:
         97:a1:7a:f0:eb:7a:74:7a:4e:2f:a1:f2:08:09:db:11:d0:93:
         79:ee:e9:a9:e4:8b:26:0f:a5:fe:0b:2c:2a:cf:ba:bb:77:e3:
         5e:ea:04:44:0c:75:c6:2b:6d:01:11:5c:4f:ea:b1:bb:15:d0:
         3a:48:7f:38:46:8f:b4:a9:fb:d8:b3:18:af:0d:7c:5a:92:17:
         c7:f4:03:f3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGE7fEbQN+DdnsyFqTI7tBWad2UMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM1RDUyMzA5NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0
MkY5RDUzNzAeFw0yNjA1MDMwMjEwMzBaFw0yNzA1MDIwMjE1MzBaMDMxMTAvBgNV
BAMTKEVBREQ4QTlEQUREODQ1NzEyOUI2RkEzQjRBQzE4QzlFMDI3MUM4OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1pjLIm2RAAogc9r70Yb0wloT
4rGM2uTVi7PApkrw4G8iQV5fkhWFgpcpyZlvhvugvCje71HYdKDwCcAHjXOfQI3L
YPr7Tp6VlipuLYuFOPyKBk20HOWOx/aXUT9kD8xNUbVokQWTnOWKpdblaYp7ijv0
08omn6HThVlcCNzAcIGS5dwgHml5grqGYNe51munJBACInJksabnf0HMbu2hEorr
54CX4Cm9mDn5LL5vsokK0qQhqVyUWzLVeJt4zMEpNYLt1K+3IaCZnGjmQXJuHQTL
+g3JNuvZROApgZmMyfkpKiBCCXgiNYqoPa4quUo4HbQ/9zCGliUOah5dyqKvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU6t2Kna3YRXEptvo7SsGMngJxyJwwHwYDVR0j
BBgwFoAUTF1SMJcGH9Qg74mHLvVdfUL51TcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTZhODExODItN2NlYi00NjVjLWE1YjUtYTE0ZWM3MzliZjk5LzAvNEM1RDUyMzA5
NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0MkY5RDUzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QzVENTIzMDk3MDYxRkQ0MjBFRjg5ODcyRUY1NUQ3RDQyRjlE
NTM3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzM0MzUyZTMxMzEzMjJlMzEzMjM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1wfzANBgkqhkiG
9w0BAQsFAAOCAQEAPBHENYIs+D8/XKUaMpIdOb8APnGXZmN7THH54I30hltwQ9XZ
/Ma2lTBuoNyuJSnkDviyAQ5NNz1uK83lbUUcOQ9HCA74LV0bE4dwTvoJhJrEqBfG
NOHygKF+lfblpwZuh7IF19qK5B1Qaj4HvZRD6mpWZ/73wi8kaM3CAAS2u/Z60ttf
hefd5vxrAPGwWb1IBXkMV7J7ubDEis9LDEgwcrR+XieSUz0sVWYQtG39EQtC77N8
l6F68Ot6dHpOL6HyCAnbEdCTee7pqeSLJg+l/gssKs+6u3fjXuoERAx1xittARFc
T+qxuxXQOkh/OEaPtKn72LMYrw18WpIXx/QD8w==
-----END CERTIFICATE-----
Generated at Wed May 13 06:37:25 2026 by rpki-client